dsh-side-chat-plus 0.3.4 → 0.4.0-alpha.1

package/lib/index.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname } from "node:path";
 import * as agentApi from "@deepseek-ai/dsh-agent";
 import { dshHomePath } from "@deepseek-ai/dsh-home-paths";
@@ -171,7 +171,6 @@ const inject = [
 	"agents",
 	"workspaceRegistry",
 	"sessionQuery",
-	"sandboxPolicy",
 	"permissionPresets",
 	"agentPresets",
 	"llm",
@@ -191,6 +190,24 @@ const RECORD_FILE = "dsh-side-chat-sessions.json";
 function recordFilePath() {
 	return dshHomePath(RECORD_FILE);
 }
+/** Read the durable side-chat record list (absent/malformed → empty). */
+async function readRecords() {
+	try {
+		const raw = await readFile(recordFilePath(), "utf8");
+		const parsed = JSON.parse(raw);
+		if (!Array.isArray(parsed)) return [];
+		return parsed.filter((entry) => {
+			const record = entry;
+			return typeof record?.childId === "string" && typeof record?.parentSessionId === "string";
+		}).map((entry) => ({
+			childId: entry.childId,
+			parentSessionId: entry.parentSessionId,
+			createdAt: typeof entry.createdAt === "number" ? entry.createdAt : 0
+		}));
+	} catch {
+		return [];
+	}
+}
 /** Persist the live side-chat record list (the "record" a future cleanup consumes). */
 async function writeRecords(records) {
 	const path = recordFilePath();
@@ -269,14 +286,6 @@ function openTurnStart(events) {
 	if (lastEnd !== void 0 && lastEnd >= lastStart) return void 0;
 	return lastStart;
 }
-/**
-* Read a session's event log across DSH versions: 0.1.5+ exposes
-* `snapshotEvents()`; 0.1.2-era sessions carried a plain `events` getter.
-*/
-function sessionEvents(session) {
-	if (typeof session.snapshotEvents === "function") return session.snapshotEvents();
-	return session.events ?? [];
-}
 /** Schemastery schema for the user-facing preferences (validated by the settings service). */
 const PrefsSchema = z.object({
 	lookupDefault: z.boolean().default(SUBCHAT_PREFS_DEFAULTS.lookupDefault),
@@ -399,10 +408,18 @@ function buildApi(ctx, sideChats, getSettings) {
 		const child = childOf(childId);
 		return { executed: await ctx.commands.execute(child, line, [], new AbortController().signal) !== void 0 };
 	};
+	/**
+	* Read a side chat's event log through the session-query service. DSH 0.1.6
+	* deprecated the Session's synchronous event getters (`snapshotEvents`,
+	* `eventAt`, `ownEvents`); `readSession` is the live-preferred asynchronous
+	* read that supersedes them, and the transcript routes already use it.
+	*/
+	const sessionEvents = async (sessionId) => (await ctx.sessionQuery.readSession(sessionId)).events;
 	/** Fold one side-chat agent's plan/goal state for its composer chrome. */
-	const state = (payload) => {
+	const state = async (payload) => {
 		const childId = requireString(payload, "childId");
-		const events = sessionEvents(childOf(childId).session);
+		childOf(childId);
+		const events = await sessionEvents(childId);
 		let planActive = false;
 		let planWanted = null;
 		let goal = null;
@@ -524,15 +541,14 @@ function buildApi(ctx, sideChats, getSettings) {
 		return { accepted: true };
 	};
 	/** List the side chats launched by one parent conversation. */
-	const list = (payload) => {
+	const list = async (payload) => {
 		const parentSessionId = requireString(payload, "parentSessionId");
 		const items = [];
 		for (const record of sideChats.values()) {
 			if (record.parentSessionId !== parentSessionId) continue;
-			const agent = record.handle.agent;
-			const status = agent.status;
+			const status = record.handle.agent.status;
 			const statusRunning = status === "running";
-			const eventRunningSince = openTurnStart(sessionEvents(agent.session));
+			const eventRunningSince = status === void 0 ? openTurnStart(await sessionEvents(record.childId)) : void 0;
 			const running = statusRunning || status === void 0 && eventRunningSince !== void 0;
 			const runningSince = running ? eventRunningSince ?? Date.now() : void 0;
 			items.push({
@@ -562,7 +578,8 @@ function buildApi(ctx, sideChats, getSettings) {
 			maxImageBytes: l.maxImageBytes,
 			maxImagesPerMessage: l.maxImagesPerMessage,
 			maxMessageImageBytes: l.maxMessageImageBytes,
-			maxImagePixels: l.maxImagePixels
+			maxImagePixels: l.maxImagePixels,
+			...l.maxImageDimension === void 0 ? {} : { maxImageDimension: l.maxImageDimension }
 		};
 	};
 	/** Read one durable image's bytes for transcript rendering. */
@@ -707,15 +724,26 @@ function buildApi(ctx, sideChats, getSettings) {
 	};
 	/** Permission-preset options for the side-chat selector. */
 	const permissions = () => {
-		const select = ctx.permissionPresets.selectFor({});
-		return {
-			options: select.options.map((o) => ({
-				value: o.value,
-				name: o.name,
-				...o.description === void 0 ? {} : { description: o.description }
-			})),
-			current: select.currentValue
+		const presets = ctx.permissionPresets;
+		const toOption = (o) => ({
+			value: o.value,
+			name: o.name,
+			...o.description === void 0 ? {} : { description: o.description }
+		});
+		const catalog = presets.catalog;
+		if (typeof catalog === "function") return {
+			options: catalog.call(presets).options.map(toOption),
+			current: presets.defaultPreset ?? "custom"
 		};
+		const selectFor = presets.selectFor;
+		if (typeof selectFor === "function") {
+			const select = selectFor.call(presets, {});
+			return {
+				options: select.options.map(toOption),
+				current: select.currentValue
+			};
+		}
+		throw new SidechatError("permissions-unavailable", "the permission-presets service exposes neither catalog() nor selectFor()", 503);
 	};
 	return {
 		"sidechat.start": start,
@@ -796,6 +824,13 @@ function apply(ctx) {
 			sideChats.clear();
 		};
 	}, "dsh-side-chat: dispose side chats");
+	ctx.effect(() => {
+		(async () => {
+			for (const record of await readRecords()) try {
+				await ctx.workspaceRegistry.archiveSession(record.childId);
+			} catch {}
+		})();
+	}, "dsh-side-chat: re-archive recorded side chats");
 	ctx.effect(() => ctx.webServer.register({
 		kind: "prefix",
 		path: "/sidechat/api",

package/lib/types/client/api.d.ts

@@ -161,6 +161,7 @@ export declare const api: {
         maxImagesPerMessage: number;
         maxMessageImageBytes: number;
         maxImagePixels: number;
+        maxImageDimension?: number;
     }>>;
     attachment: (args: {
         childId: string;

package/lib/types/client/locales.d.ts

@@ -52,6 +52,7 @@ export declare const zh: {
     'image.unsupported': string;
     'image.tooMany': string;
     'image.fileTooLarge': string;
+    'image.dimensionTooLarge': string;
     settingsNav: string;
     'settings.lookupTitle': string;
     'settings.lookupDesc': string;
@@ -147,6 +148,7 @@ export declare const en: {
     'image.unsupported': string;
     'image.tooMany': string;
     'image.fileTooLarge': string;
+    'image.dimensionTooLarge': string;
     settingsNav: string;
     'settings.lookupTitle': string;
     'settings.lookupDesc': string;

package/lib/types/context-types.d.ts

@@ -38,17 +38,14 @@ export interface SideSessionEvent {
     surfaceOp?: 'append' | 'replace' | 'remove';
     sourceEventSeqs?: number[];
 }
-/** The live session face the host reads (header + append-only event log). */
+/**
+ * The live session face the host reads. Event reads go through
+ * `sessionQuery.readSession` instead: DSH 0.1.6 deprecated the Session's
+ * synchronous event getters (`events` before 0.1.5, `snapshotEvents` after).
+ */
 export interface SideSession {
     id: string;
     header: SideSessionHeader;
-    /**
-     * 0.1.2-era event getter. Removed in 0.1.5 (snapshotEvents takes over), so
-     * host code reads through `sessionEvents()` which prefers the new method.
-     */
-    events?: readonly SideSessionEvent[];
-    /** 0.1.5+ snapshot of the full event log; absent on 0.1.2-era sessions. */
-    snapshotEvents?: (fromSeq?: number, toSeqExclusive?: number) => readonly SideSessionEvent[];
     requestHeader?: () => {
         config?: {
             provider?: string;
@@ -198,12 +195,6 @@ export interface SideSessionLogSnapshot {
 export interface SideSessionQuery {
     readSession(sessionId: string): Promise<SideSessionLogSnapshot>;
 }
-/** Sandbox mode vocabulary (read from the session override). */
-export type SideSandboxMode = 'read-only' | 'workspace-write' | 'danger-full-access';
-/** The sandbox policy face. */
-export interface SideSandboxPolicy {
-    overrideOf(session: SideSession): SideSandboxMode | undefined;
-}
 /** One permission preset option. */
 export interface SidePresetOption {
     value: string;
@@ -214,7 +205,14 @@ export interface SidePresetOption {
 export interface SidePermissionPresets {
     current(session: SideSession): string;
     set(session: SideSession, name: string): void;
-    selectFor(state: unknown): {
+    /** 0.1.6+: process-level catalog of selectable presets. */
+    catalog?(): {
+        options: SidePresetOption[];
+    };
+    /** 0.1.6+: the preset selected as the default for future sessions. */
+    defaultPreset?: string;
+    /** 0.1.5 and earlier: combined catalog plus current value. Removed in 0.1.6. */
+    selectFor?(state: unknown): {
         options: SidePresetOption[];
         currentValue: string;
     };
@@ -350,6 +348,8 @@ export interface SideAttachmentStore {
         maxImagesPerMessage: number;
         maxMessageImageBytes: number;
         maxImagePixels: number;
+        /** 0.1.6+ per-image intrinsic width/height ceiling; absent on earlier lines. */
+        maxImageDimension?: number;
         mediaTypes: readonly string[];
     };
     validateImage(input: {
@@ -402,7 +402,6 @@ declare module 'cordis' {
         agents: SideAgentsService;
         workspaceRegistry: SideWorkspaceRegistry;
         sessionQuery: SideSessionQuery;
-        sandboxPolicy: SideSandboxPolicy;
         permissionPresets: SidePermissionPresets;
         agentPresets: SideAgentPresets;
         llm: SideLlm;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-side-chat-plus",
-  "version": "0.3.4",
+  "version": "0.4.0-alpha.1",
   "description": "侧边聊天 Plus (Side chat Plus) — DSH web plugin: select text in a conversation and ask it in a per-session side chat (hidden ordinary session, own right-side panel, inherits model/effort/permissions, lookup toggle).",
   "private": false,
   "type": "module",
@@ -67,47 +67,47 @@
     "schemastery": "^3.18.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-session-query": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-workspace": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1",
+    "@deepseek-ai/dsh-agent": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-session-query": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-workspace": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
+    "@deepseek-ai/dsh-home-paths": "^0.1.0-rc.6 || ^0.1.1-0 || ^0.1.2-0 || ^0.1.5-alpha.1 || ^0.1.6-0",
     "cordis": "^4.0.0-rc.7",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-agent": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-llm": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-session": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-session-query": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-workspace": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-permission-presets": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-agent-presets": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-settings": "^0.1.5-alpha.2",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-llm": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-session": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-session-query": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-workspace": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-permission-presets": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-sandbox-policy": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-agent-presets": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-settings": "^0.1.5-alpha.2 || ^0.1.6-0",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-alpha.2 || ^0.1.6-0",
     "@types/node": "^24.0.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "~18.3.1",
@@ -120,7 +120,8 @@
     "vitest": "^4.1.8"
   },
   "scripts": {
-    "build": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && tsdown",
+    "build": "node -e \"require('node:fs').rmSync('lib',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && tsdown && node scripts/check-seed-exports.mjs",
+    "check:seed": "node scripts/check-seed-exports.mjs",
     "typecheck": "tsc --noEmit",
     "bundle": "tsdown",
     "watch": "tsdown --watch",

package/src/client/api.ts

@@ -93,7 +93,7 @@ export const api = {
     call<{ accepted: true }>('sidechat.inject', args),
   directory: () => call<SidechatDirectory>('sidechat.directory', {}),
   permissions: () => call<SidechatPermissions>('sidechat.permissions', {}),
-  limits: () => call<{ mediaTypes: string[]; maxImageBytes: number; maxImagesPerMessage: number; maxMessageImageBytes: number; maxImagePixels: number }>('sidechat.limits', {}),
+  limits: () => call<{ mediaTypes: string[]; maxImageBytes: number; maxImagesPerMessage: number; maxMessageImageBytes: number; maxImagePixels: number; maxImageDimension?: number }>('sidechat.limits', {}),
   attachment: (args: { childId: string; attachmentId: string }) =>
     call<{ mediaType: string; data: string }>('sidechat.attachment', args),
   inherit: (args: { parentSessionId: string }) =>

package/src/client/index.tsx

@@ -14,7 +14,7 @@ import {
   IconChevronDownOutline14,
   IconChevronRightOutline14,
   IconPanelLeftOutline16,
-  IconSendOutline16,
+  IconSendOutline14,
   IconStopFill16,
   IconThinkOutline14,
   MarkdownText,
@@ -264,6 +264,22 @@ function createDraftImages(files: readonly File[]): ComposerAttachment[] {
   })
 }
 
+/**
+ * Read one image file's intrinsic pixel size, releasing the decoded bitmap.
+ * Returns null when the browser cannot decode it: the host's `validateImage`
+ * stays the authority either way.
+ */
+async function imageSize(file: File): Promise<{ width: number; height: number } | null> {
+  try {
+    const bitmap = await createImageBitmap(file)
+    const size = { width: bitmap.width, height: bitmap.height }
+    bitmap.close()
+    return size
+  } catch {
+    return null
+  }
+}
+
 /** Revoke one draft image's preview URL. */
 function releaseDraftImage(attachment: ComposerAttachment): void {
   URL.revokeObjectURL(attachment.previewUrl)
@@ -952,7 +968,7 @@ function SidechatPanel(props: {
   const [now, setNow] = useState(() => Date.now())
   const [dragActive, setDragActive] = useState(false)
   const [lightbox, setLightbox] = useState<ComposerAttachment | null>(null)
-  const [limits, setLimits] = useState<{ mediaTypes: string[]; maxImageBytes: number; maxImagesPerMessage: number; maxMessageImageBytes: number } | null>(null)
+  const [limits, setLimits] = useState<{ mediaTypes: string[]; maxImageBytes: number; maxImagesPerMessage: number; maxMessageImageBytes: number; maxImagePixels: number; maxImageDimension?: number } | null>(null)
   /** Index of the assistant message whose "summarize then insert" is in flight. */
   const [summarizingIndex, setSummarizingIndex] = useState<number | null>(null)
   /** Which question-dialog item is being brought into the side chat ('all' or an option label). */
@@ -1214,26 +1230,41 @@ function SidechatPanel(props: {
       props.store.patch({ error: props.t('image.unsupported') })
       return
     }
-    try {
-      if (limits !== null) {
-        if (images.some((f) => !limits.mediaTypes.includes(f.type))) {
-          props.store.patch({ error: props.t('image.unsupported') })
-          return
-        }
-        if (panel.attachments.length + images.length > limits.maxImagesPerMessage) {
-          props.store.patch({ error: props.t('image.tooMany') })
-          return
-        }
-        if (images.some((f) => f.size > limits.maxImageBytes)) {
-          props.store.patch({ error: props.t('image.fileTooLarge') })
-          return
+    void (async () => {
+      try {
+        if (limits !== null) {
+          if (images.some((f) => !limits.mediaTypes.includes(f.type))) {
+            props.store.patch({ error: props.t('image.unsupported') })
+            return
+          }
+          if (panel.attachments.length + images.length > limits.maxImagesPerMessage) {
+            props.store.patch({ error: props.t('image.tooMany') })
+            return
+          }
+          if (images.some((f) => f.size > limits.maxImageBytes)) {
+            props.store.patch({ error: props.t('image.fileTooLarge') })
+            return
+          }
+          // DSH 0.1.6 added a per-image intrinsic width/height ceiling; older
+          // lines omit it. Decoding is async, so this check is awaited rather
+          // than folded into the size-type ones above.
+          const maxDimension = limits.maxImageDimension
+          if (typeof maxDimension === 'number' && maxDimension > 0) {
+            for (const file of images) {
+              const size = await imageSize(file)
+              if (size !== null && (size.width > maxDimension || size.height > maxDimension)) {
+                props.store.patch({ error: props.t('image.dimensionTooLarge') })
+                return
+              }
+            }
+          }
         }
+        const created = createDraftImages(images)
+        props.store.patch({ attachments: [...panel.attachments, ...created], error: null })
+      } catch (error) {
+        props.store.patch({ error: error instanceof Error ? error.message : String(error) })
       }
-      const created = createDraftImages(images)
-      props.store.patch({ attachments: [...panel.attachments, ...created], error: null })
-    } catch (error) {
-      props.store.patch({ error: error instanceof Error ? error.message : String(error) })
-    }
+    })()
   }, [limits, panel.attachments, props.store, props.t])
 
   // Load the deployment image policy once (fast-path checks mirror the host).
@@ -1603,7 +1634,7 @@ function SidechatPanel(props: {
               aria-label={activeRunning ? props.t('panel.stop') : props.t('panel.send')}
               onClick={activeRunning ? stop : send}
             >
-              {activeRunning ? <IconStopFill16 size={16} /> : <IconSendOutline16 size={16} />}
+              {activeRunning ? <IconStopFill16 size={16} /> : <IconSendOutline14 size={16} />}
             </button>
           </Tooltip>
         </div>

package/src/client/locales.ts

@@ -53,6 +53,7 @@ export const zh = {
   'image.unsupported': '不支持的图片格式',
   'image.tooMany': '图片数量超出限制',
   'image.fileTooLarge': '图片过大',
+  'image.dimensionTooLarge': '图片尺寸超出限制',
   'settingsNav': '侧边聊天',
   'settings.lookupTitle': '默认勾选「需要时从工作区 / 主会话查信息」',
   'settings.lookupDesc': '新会话的侧边聊天默认打开此开关；可在每次聊天中临时更改',
@@ -149,6 +150,7 @@ export const en = {
   'image.unsupported': 'Unsupported image type',
   'image.tooMany': 'Too many images',
   'image.fileTooLarge': 'Image too large',
+  'image.dimensionTooLarge': 'Image dimensions exceed the limit',
   'settingsNav': 'Side chat',
   'settings.lookupTitle': 'Default on: "look up workspace / parent when needed"',
   'settings.lookupDesc': 'New conversations start with this switch on; you can still change it per chat',

package/src/context-types.ts

@@ -43,17 +43,14 @@ export interface SideSessionEvent {
   sourceEventSeqs?: number[]
 }
 
-/** The live session face the host reads (header + append-only event log). */
+/**
+ * The live session face the host reads. Event reads go through
+ * `sessionQuery.readSession` instead: DSH 0.1.6 deprecated the Session's
+ * synchronous event getters (`events` before 0.1.5, `snapshotEvents` after).
+ */
 export interface SideSession {
   id: string
   header: SideSessionHeader
-  /**
-   * 0.1.2-era event getter. Removed in 0.1.5 (snapshotEvents takes over), so
-   * host code reads through `sessionEvents()` which prefers the new method.
-   */
-  events?: readonly SideSessionEvent[]
-  /** 0.1.5+ snapshot of the full event log; absent on 0.1.2-era sessions. */
-  snapshotEvents?: (fromSeq?: number, toSeqExclusive?: number) => readonly SideSessionEvent[]
   requestHeader?: () => { config?: { provider?: string; model?: string; reasoningEffort?: string; maxTokens?: number } } | undefined
 }
 
@@ -212,14 +209,6 @@ export interface SideSessionQuery {
   readSession(sessionId: string): Promise<SideSessionLogSnapshot>
 }
 
-/** Sandbox mode vocabulary (read from the session override). */
-export type SideSandboxMode = 'read-only' | 'workspace-write' | 'danger-full-access'
-
-/** The sandbox policy face. */
-export interface SideSandboxPolicy {
-  overrideOf(session: SideSession): SideSandboxMode | undefined
-}
-
 /** One permission preset option. */
 export interface SidePresetOption {
   value: string
@@ -231,7 +220,12 @@ export interface SidePresetOption {
 export interface SidePermissionPresets {
   current(session: SideSession): string
   set(session: SideSession, name: string): void
-  selectFor(state: unknown): { options: SidePresetOption[]; currentValue: string }
+  /** 0.1.6+: process-level catalog of selectable presets. */
+  catalog?(): { options: SidePresetOption[] }
+  /** 0.1.6+: the preset selected as the default for future sessions. */
+  defaultPreset?: string
+  /** 0.1.5 and earlier: combined catalog plus current value. Removed in 0.1.6. */
+  selectFor?(state: unknown): { options: SidePresetOption[]; currentValue: string }
 }
 
 /** The agent presets face (composeFrom joins a child to the parent's composition). */
@@ -356,6 +350,8 @@ export interface SideAttachmentStore {
     maxImagesPerMessage: number
     maxMessageImageBytes: number
     maxImagePixels: number
+    /** 0.1.6+ per-image intrinsic width/height ceiling; absent on earlier lines. */
+    maxImageDimension?: number
     mediaTypes: readonly string[]
   }
   validateImage(input: { data: Uint8Array; mediaType: string; name?: string }): Promise<void>
@@ -394,7 +390,6 @@ declare module 'cordis' {
     agents: SideAgentsService
     workspaceRegistry: SideWorkspaceRegistry
     sessionQuery: SideSessionQuery
-    sandboxPolicy: SideSandboxPolicy
     permissionPresets: SidePermissionPresets
     agentPresets: SideAgentPresets
     llm: SideLlm